PARALLELIZED CRC CALCULATION 
METHOD AND SYSTEM 
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FIELD OF THE INVENTION 

The present invention relates generally to a 
parallelized CRC calculation method and system, and, more 
10 particularly, to a method and system for applications of 
generating and checking CRC32, especially for the Frame Check 
Sequence (FCS) systems. 

15 BACKGROUND OF THE INVENTION 

Cyclic redundancy code (CRC) has been used for a 
long time to preserve the integrity of digital data in storage and 
transmission systems. More particularly, CRC is an important 

20 error detection tool used for communications and data 
processing applications. The CRC schemes are often used for 
checking integrity of data because they are easy to implement 
and they detect a large class of errors. CRC is a kind of 
checksum which is transmitted with data between a source node 

25 and a target node over a communications medium. The source 
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node calculates the CRC for the data to be transferred using a 
predetermined polynomial and then transmits the data along 
with the CRC to the target node where the CRC of the received 
data is independently generated using the predetermined 

5 generator polynomial and compared with the CRC received from 
the source node to check if errors have occurred during the 
transmission. Treating the data or message as a binary 
polynomial, its CRC corresponding to a particular generator 
polynomial may be generated by raising the message polynomial 

10 to a proper power first and then taking the remainder of the 
message polynomial divided by the generator polynomial. For 
CRC generation, data bits are typically serially inputted into a 
CRC generator in order to produce the appropriate CRC code for 
transmission along with the data. Traditionally, CRC codes are 

15 generated with Linear Feedback Shift Register (LFSR) circuits. 

An LFSR takes the input data and shifts through a series of 
flip-flops on successive clock cycles. Combinations of the shift 
register output and data input are fed back to the flip-flops via 
exclusive-OR gates. An LFSR can be defined in terms of a 

20 generator polynomial which relates the input data and the CRC 
code via a polynomial expression and of which "+" is an 
exclusive-OR operation. The state of the flip-flops upon 
completion of the shifting process is the CRC code. 

25 For example, ATM uses a FCS field derived from CRC 
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error detection codes for error checking. The integrity of the 
transmitted or processed message in an ATM system is ensured 
by the addition at the end of the message of the FCS traveling 
with the message itself so it can be checked on the reception side 
5 for proper transmission. The FCS code has been standardized 
for data integrity checking as described in the ANSI X3. 139- 1987 
document pages 28 and 29. All the CRC codes constitute a 
finite Galois Field (GF), and the CRC32 codes belong to the GF 
generated by the following generator polynomial of degree 32: 

10 

g(x)=x 32 +x 26 +x 23 +x 22 +x 16 +x 12 +x 1 1 +x 10 +x 8 +x 7 +x 5 +x 4 +x 2 +x+ 1 . 

This generator polynomial of degree 32 was chosen as a standard 
for error checking in Ethernet and then chosen by the ATM 

15 standard for AAL5 error checking. In the circuitry for 
calculating the FCS or checking the message, an LFSR carries 
out a bit by bit multiplication in the GF, i.e., modulo the 
polynomial on which GF is generated, and by which each bit of 
the message is inputted into the LFSR in the manner of most 

20 significant bit (MSB) first and division is performed by feedbacks. 
At the end of the process, the FCS, i.e., the remainder of the 
division, is within the shift registers. 

Hardware implementation for CRC generators in large 
25 scale digital systems is preferred because it is faster. The 
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drawback of hardware implementation of CRCs is that more 
hardware is required with consequent increase in cost, size and 
complexity and a decrease in reliability. Software implemented 
CRCs are known although their use is not widespread because of 
5 the speed penalty thought to be inevitable. Those skilled in the 
art understand that choosing a polynomial of a larger degree will 
result in greater error detection. However, for the applications 
of current large scale systems, the desired hardware becomes too 
complicated and costly to be implemented and the required 

10 software needs huge computations. Several improvements were 
made for CRC generators. For example, by using CRC routines 
to generate tables consisting of all possible combinations of the 
chosen polynomial, the checksum generation is reduced to a 
table lookup. These CRC routines are considered to be the 

15 fastest software implementations available, but they take up a 
great deal of dedicated memory. Early CRC implementations 
use the concept of LFSR in which the polynomial division is 
processed one bit at a time. However, the serial processing for 
the generation of the CRC is relatively slow, and as the 

20 technology advanced, single-bit CRC generation was not enough 
to handle high-speed data processing and transmission, and 
parallel CRC algorithms were then developed to meet this need. 
The key reason that existing CRC algorithms are limited in their 
degree of parallelism is deeply rooted in the concept of LFSRs. 

25 All existing algorithms try to solve the same problem, i.e., how to 
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parallelize the bit-by-bit operation of LFSRs. As a result, the 
degree of parallelism never goes beyond the perceived size of 
LFSRs. 

5 Accordingly, it is desired a parallelized CRC 

calculation method and system to reduce the processing for 
generation of CRC codes. 

SUMMARY OF THE INVENTION 

10 

The present invention is directed to a methodology to 
simplify the CRC calculation, by which the process for the CRC 
generation is speeded up and the circuitry for the system is 
simplified. 

15 

To simplify the CRC calculation, according to the 
present invention, a linear mapping matrix corresponding to the 
LFSR to generate the CRC is planning and thus the computation 
of the LFSR to the input message for the CRC generation 

20 becomes a simplified matrix multiplication. Various linear 
mapping matrixes are provided for the processed message 
inputted in byte-wise, word-wise and doubleword-wise forms. 
In addition, the input messages are padded with specific 
dummies on the transmission side or the CRC outputs on the 

25 reception side are compared with specific patterns in accordance 
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with their length types for the word-wise and doubleword-wise 
CRC32 cases. 
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BRIEF DESCRIPTION OF THE DRAWINGS 



These and other objects, features and advantages of 
the present invention will become apparent to those skilled in 
the art upon consideration of the following description of the 
preferred embodiments of the present invention taken in 
conjunction with the accompanying drawings, in which: 

Fig. 1 shows two schemes for a generator polynomial 
with message shifted into LFSR from MSB and LSB sides, 
respectively; 

Fig. 2 shows two schemes linearly mapped from those 

of Fig. 1; 

Fig. 3 shows the mapping matrix and its inverse for 
CRC32 generations; 

Fig. 4 shows the circuitries for byte-wise CRC32 
generations; 

Fig. 5 shows the mapping matrix and its inverse for 
byte-wise CRC32 generations; 

Fig. 6 shows the mapping matrix and its inverse for 



word-wise CRC32 generations; 



Fig. 7 shows the circuitries for word- wise CRC32 
generations; 

5 

Fig. 8 shows the mapping matrix and its inverse for 
doubleword-wise CRC32 generations; and 

Fig. 9 shows the circuitries for doubleword-wise 
10 CRC32 generations. 



DETAILED DESCRIPTION OF THE INVENTION 

15 Cyclic code in a systematic form 

As is well-known, an (n, k) linear code C is called a 
cyclic code if every cyclic shift of a code vector in C is also a code 
vector in C. To figure out a cyclic code in a systematic form on 
20 the transmission side, let the message to be encoded is 

M=(m k -i ...mi mo) T , (EQ- 1 ) 

and the corresponding message polynomial is 

25 
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m(x)=m 0 x kl +mix k - 2 +. . . +mk-2X+m k -i . 



(EQ-2) 



After multiplying m(x) by x n k , equation EQ-2 becomes 



x nk m(x)=mox nl +mix n - 2 +. . . +mk-2X n - k+1 +m.k-ix n - k . 



(EQ-3) 



Then, x n " k m(x) is divided by the generator polynomial g(x), and it 
becomes 



By rearranging equation EQ-4 and inversing the sign of the 
remainder to replace the original one, it will be obtained the 
codeword polynomial 



Obviously, this codeword polynomial is divisible by the generator 
polynomial g(x). 

From the above description, it can be summarized that 
a cyclic encoding in a systematic form includes: 

Step 1 . Multiplying the message m(x) by x n " k ; 

Step 2. Deriving the remainder r(x) by dividing x n k m(x) by the 



x nk m(x)=q(x)g(x)+r(x). 



(EQ-4) 



xn- k m(x)+r(x)=q(x)g(x). 



(EQ-5) 



generator polynomial g(x); and 
Step 3. Combining r(x) with x n - k m(x) to obtain the codeword 
polynomial x n - k m(x)+r(x). 

5 Likewise, in order to check the integrity of the received 

codeword on the reception side, it is verified if the received 
sequence is divisible by the generator polynomial g(x) . 

Shortened cyclic codes 

10 

Given an (n, k) cyclic code C, if the set of the code 
vectors for which the / leading high-order information digits are 
identical to zero, then there are 2 k / such code vectors and they 
form a linear subcode of C. If the I zero information digits are 
15 deleted, it is obtained a set of 2 k -< vectors of length n-Z. These 

shortened vectors form an (n-l, k-l) linear code, and which code is 
called a shortened cyclic code and is not cyclic. 

Implementation of divisor 

20 

No matter for a cyclic code encoding or decoding, a 
divisor of Galois Field GF(2) is needed. For example, a simple 
Linear Feedback Shift Register (LFSR) is employed to implement 
the divisor. Furthermore, depending on the dividend sequence 
25 shifted into LFSR either from MSB side or Least Significant Bit 
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(LSB) side, there are two schemes for implementation of a divisor, 
i.e., 

Scheme 1: Message is shifted into LFSR from MSB side, which is 
5 mathematically equivalent to 

m(x)x nk modg(x) (EQ-6) 

Scheme 2: Message is shifted into LFSR from LSB side, which is 
10 mathematically equivalent to 

m(x)modg(x) (EQ-7) 

For illustration, two circuitries are shown in Fig. 1 for these two 
15 schemes for the generator polynomial g(x)=x 3 +x 2 +l. 

Linear mapping 

Further, the linear feedback shift registers shown in 
20 Fig. 1 can be regarded as a linear mapping mathematically, as 
shown in Fig. 2. For the same generator polynomial 
g(x)=x 3 +x 2 +l, it can be derived the G mapping: 

go(2)=gi(2)©gi(l), (EQ-8a) 
25 go(l)=gi(0), and (EQ-8b) 
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go(0)= gi (2), 



(EQ-8c) 



and this linear mapping can be represented in a matrix form 
as 



~S„(2)~ 




>,(2)" 




= G 




So®). 







(EQ-9) 
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where 
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G = 



0 


1 


0 


1 


0 


1 


1 


0 


0 



(EQ-10) 



and trivially, the matrix G is invertible and its inverse 
matrix is 



G~ ] = 



0 0 1 

1 0 0 
0 1 1 



(EQ-11) 



25 



Based on the Scheme 1 and 2, there exist recursive 
equations between the output of the D-type flip-flops of the 
polynomial generator g(x) and the input of the encoded 
message, respectively, as 



12 



Scheme 1: 



R(k)=G(R(k-l)+M(k-l)), and (EQ-12) 

Scheme 2: 

R(k)=GR(k-l)+M(k-l). (EQ-13) 

Further tracing the output of the D-type flip-flops, i.e., the 
remainder of a division, in Scheme 1 , it results in 

R(0)=I, (EQ-14a) 

R(1)=G(R(0)+M(0))=GI+GM, (EQ-14b) 
R(2)=G(R(1)+M(1)) 

=G 2 I+G 2 M(0)+GM(1), (EQ-14c) 

R(k)=G(R(k-l)+M(k-l)) 

=G k I+G k M(0)+GkiM(l)+...+GM(k-l) (EQ-14d) 

Generation of FCS 

In Standard 802.3, the CRC32 is employed to generate 
FCS and the generator polynomial is 

g(x)=x 32 +x 26 +x 23 +x 22 +x 16 +x 12 +x 11 +x 10 +x 8 +x 7 + 



13 



x 5 +x 4 +x 2 +x+l. 



(EQ-15) 



Mathematically, the CRC value corresponding to a given frame is 
defined by the following procedures: 

5 

a. ) The first 32 bits of the frame are complemented; 

b. ) The k bits of the frame are then considered to be the 

coefficients of a polynomial m(x) of degree k- 1 ; 

c. ) m(x) is multiplied by x 32 and divided by g(x), producing a 
10 remainder r(x) of degree less than or equal to 31; 

d. ) The coefficients of r(x) are considered to be a 32-bit sequence; 

and 

e. ) The bit sequence is complemented and the result is the FCS 

f(x). 

15 

In the procedure a, disclosed are two implementation methods: 

Method 1 : complementing the first 32bits of the message directly; 
and 

20 Method 2: initiating the D-type flip-flop with 1 specific value, e.g., 

Oxffffffff for the Scheme 1 and 0x46af6449 for the 
Scheme 2. 

The mapping matrix G and its inverse matrix G 1 are shown in 
25 Fig. 3. 



14 



On the reception side, when the whole of frame is 
acquired, the output of the Scheme 1 CRC checker is compared 
with the value of 0xc704dd7b to examine the integrity of the 
received frame. The reason is explained herewith. 

Let the transmitted message (except for FCS) is represented in a 
polynomial form 

m(x)=mox kl +mix k - 2 +. . . +mk-2X+mk-i , (EQ- 1 6) 

and defining a polynomial c(x) of degree 31 with all of its 
coefficients to be 

c(x)=lx 31 + ix 30 +. ..+Ix 2 +1jc+I, (EQ- 1 7) 

then the remainder r(x) generated by the procedure c will be 

r(x)=(m(x)+c(x)x k - 3 2)x 32 modg(x) . (EQ- 1 8) 

After performing procedures d to e, it will generate FCS and the 
transmitted sequences 



f(x)=r(x), and (EQ-19) 
n(x)=m(x)x32+f( x ) (EQ-20) 
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On the reception side, if the integrity of this frame sequence is 
maintained, then the remainder of a division will be 

5 s(x) = (n(x) +c(x)x k )x 32 modg(x) 

=(m(x)x 32 +f(x)+c(x)x k )x 32 modg(x) 

=(m(x)x32+ c (x)xk-hf(x))x32modg(x) (EQ-2 1) 

From equation EQ-18, equation EQ-21 can be further modified 
10 to be 

s (x) = (q(x) g(x) + r (x) + f (x) )x 32 modg(x) 
=(r(x)+f(x))x 32 modg(x) 
=c(x)x 32 modg(x) 

15 =[0xc704dd7b][x 31 ...x 1 1] (EQ-22) 

Based on a similar derivation, it can be further 
obtained, if the Scheme 2 is adopted, that the checking pattern 
will be the value of Oxffffffff . 

20 

Parallelized CRC calculation 

So far the encoding message is sequentially inputted 
to the CRC calculation with one bit each time, however, for 
25 high-speed applications, CRC calculation is desired for the 
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capability of multiple message bits inputted, e.g., byte-wise, at a 
time to increase the throughput. Consequently, the principal 
architecture of the previous proposed two schemes is maintained 
and there is only somewhat difference at the mapping matrix. 

Let the input message and the status of the flip-flops 
be represented, respectively, with a vector form as 

M(k)=[m k 0 ... 0] T , and 
R(k)=[rk 31 r k 30 ...rkO]T. 

Tracing the R(k) influenced by the values of M(k), 

initially, R(0)=0, (EQ-25a) 
then, R(1)=G(R(0)+M(0))=GM(0), and (EQ-25b) 
R(2)=G(R(1)+M(1))=G2M(0)+GM(1). (EQ-25c) 

It can be further verified 

G 2 M(0)=mo x the 1st column of the G 2 matrix, and 

(EQ-26a) 

GM(l)=mixthe 1st column of the G matrix. (EQ-26b) 
Defining a new vector with I (^32) non-zero entries as 



(EQ-23) 
(EQ-24) 
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Mz(k)=[m k 1 - 1 mki-2 ...m k ° 0 ...0] T 
=[mk*i mk*i+i ...mk*i+i-i 0 ...0] 



(EQ-27a) 
(EQ-27b) 



When 1=2 and k=0, it becomes 

M 2 (0)=[m 0 mi ...0 ...0] T , (EQ-28) 

and it is further derived 

G 2 M2(0)=mo*the 1st column of the G 2 matrix + 

mixthe 2nd column of the G 2 matrix. (EQ-29) 

Examining the property of the G matrix, it can be found 

the 1 st column of the G matrix = 

the 2nd column of the G 2 matrix. (EQ-30) 
Hence, it is obtained 

G 2 M 2 (0)=G 2 M(0)+GM(1), (EQ-31) 
and it is further included that 

G i M*(0)=G'M(0)+G"M(l)+...+GM(Z-l), for I ^ 32. 

(EQ-32) 
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Byte-wise CRC32 

When the message is inputted in byte-wise form at a 
5 time, the input message and calculated remainder vectors are 
represented as 

M 8 (k)-[ml m* ... m° 0 ... 0]f x32 (EQ-33) 
R(k) = [rf r? ... r° k ]i 32 (EQ-34) 

10 

If the Scheme 1 is adopted, the recursive equation of the input 
message and calculated remainder is 

R(k+1) = T(R(k)+M 8 (k)), (EQ-35) 

15 

and the circuitry is shown in Fig. 4. 

Likewise, if the Scheme 2 is adopted, the recursive 
equation will be 

20 

R(k+1) = TR(k)+M 8 (k), (EQ-36) 
and its circuitry is also shown in Fig. 4. 
25 For equation EQ-35 and 36, the mapping matrix T and 
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its inverse are shown in Fig. 5, and of which, the number on the 
right-hand side of each row indicates how many nonzero entries 
that row has. For example, in the matrix T, Row 1 has 4 
nonzero entries and those rows with maximum nonzero entries, 
5 the value of 7, are Row 5, 12 and 13. 

Word-wise CRC32 

When the message is inputted in word- wise form at a 
10 time, the input message and calculated remainder vectors are 

Mi 6 (k) = [mi 5 m\ 4 ... m° k 0 ... 0]f x32 (EQ-37) 
R(k) = [rr rf ...rl]l 32 (EQ-38) 

15 Similar to the situations for the byte-wise form, the recursive 

equations for the Scheme 1 and 2 are 

R(k+1) = T(R(k)+Mi 6 (k)) for Scheme 1, and (EQ-39) 
R(k+1) - TR(k)+Mi 6 (k) for Scheme 2, (EQ-40) 

20 

and for which, the matrix T and its inverse T" 1 are shown in Fig. 
6, and their circuitries are shown in Fig. 7. 

However, the MAC frame is based on octet format, and 
25 the length of the processed message is not always divisible by 2. 

20 



As a result, some dummies are padded on the message in order 
to have the word- wise format when the word- wise CRC 
calculation is employed. Two strategies for dummy padding are 
further proposed: 

Strategy 1: padding with some zero-valued octets before the 
prefix of the processed message for the transmission 
side; and 

Strategy 2: padding with some zero-valued octets after the suffix 
of the processed message for the reception side. 

In the word- wise case, no matter what the length of a 
frame is, they can be classified in accordance with their length 
into two types: 2n and 2n+l. If the Strategy 1 is adopted, the 
15 initial values of the flip-flops will vary with the length type as 
listed in 



Table 1 



Length 
type 


Padding 
number 


C(0) 


C(l) 


C(2) 


2n+l 


1 


00 ff 00 00 


ff ff 00 00 


ff 00 00 00 


2n 


2 


00 00 00 00 


ff ff 00 00 


ff ff 00 00 



20 In order to complement the first 32 bits of the processed 
message, C(0), C(l) and C(2) vectors in Table 1 are added to the 
first 3 message blocks, and the influences of the C(i) on the 
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calculated R(x) follow the relations 



R(1)=TC(0) (EQ-41a) 

R(2)=T(R(1)+C(1))=T2 C(0)+ TC(1), and (EQ-41b) 

R(3)=T(R(2)+C(2))=T 3 C(0)T2 C(l)+T C(2), (EQ-41c) 

and the initial value of R(x) after 3 times of iterations is 
equivalent to the influences of C(i) on it, i.e., 

T3 R(0)= T3 C(0)+T2 C(l)+T C(2), or (EQ-42a) 

R(0)= C(0)+T-i C(l)+T-2 C(2), (EQ-42b) 

and summarized in 

Table 2 



Length type 


The initial value of R(0) 


2n+l 


0x9bfla90f 


2n 


0x09b93859 



For the Strategy 2, the resultant output of the 
flip-flops will vary with the length of the processed frame, and 
which implies, for examining the integrity of a received frame, 
that the output Pi will be compared with a specified pattern 
depending on the length type i as 

Pi = G**i [0xc704dd7b] T , for i = 1 and 2, (EQ-43) 
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and listed in 



Table 3 



Length type 


Padding number 


Pattern (Pi) 


2n+l 


1 


0x4710bb9c 


2n 


2 


Ox3a7abc72 



5 

Doubleword-wise CRC 32 

When the message is inputted in doubleword-wise 
form at a time, the input message and calculated remainder 
10 vectors are 

M 32 (k)=[m^ mf ... m° ]f x32 , and (EQ-44a) 
R(k)=[rr rf ... r°]f x32 . (EQ-44b) 

15 Similar to the byte-wise case, the recursive equation R(k) for the 
Scheme 1 and 2 are 

R(k+1) = T(R(k)+M 32 (k)), and [ EQ-45a 3 

R(k+ 1) = T R(k)+M 32 (k), C EQ-45b ) 

20 

where the matrix T is defined in Fig. 8, and the corresponding 
circuitries are shown in Fig. 9. 
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For the initial value of the flip-flops in the Scheme 2 in 
the above description, it can be derived by 



G32R(0) = [Oxffffffffp 

R(0) = (G 32 ) 1 [0xffffffff|T 
= [0x46af6449] T 



(EQ-46a) 
(EQ-46b) 



10 
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Again, no matter what the length of a frame is, they 
can be classified into 4 types: 4n, 4n+l, 4n+2 and 4n+3. 

When the Strategy 1 is adopted, the initial values of 
the flip-flops will vary with the length type as denoted in 

Table 4 



Length type 


Padding number 


C(0) 


C(l) 


4n+3 


1 


00 ff ff ff 


ff 00 00 00 


4n+2 


2 


00 00 ff ff 


ff ff 00 00 


4n+l 


3 


00 00 00 ff 


ff ff ff 00 


4n 


4 


00 00 00 00 


ff ff f f ff 



The recursive equations are 
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R(l) = TC(0), and 

R(2) = T(R(1)+C(1)) = T2C(0)+TC(1) 

Let the initial values of the flip-flops be R(0), so that 



(EQ-47a) 
(EQ-47b) 
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T2R(0) = T2C(0)+ TC(1), or 
R(0) = C(0)+T-iC(l), 



(EQ-48a) 
(EQ-48b) 



and R(0) is listed in 



Table 5 



Length type 


The initial value of R(0) 


4n+3 


0x9bfla90f 


4n+2 


0x09b93859 


4n+l 


0x816474c5 


4n 


0x46af6449 



In the strategy 2, the resultant output of the flip-flops 
will vary with the length of the processed frame, which result 
implies, for examining the integrity of a received frame, the 
output Pi is compared with a specified pattern depending on the 
length type i, in the following rule 



Pi=G8i[0xc704dd7b]T for i = 1, 2, 3 and 4, (EQ-49) 
and the pattern in 



Table 6 



Length type 


Padding number 


Pattern (Pi) 


4n+3 


1 


0x4710bb9c 


4n+2 


2 


0x3a7abc72 


4n+l 


3 


0x8104c946 


4n 


4 


0x69044bb59 
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While the present invention has been described in 
conjunction with preferred embodiments thereof, it is evident 
that many alternatives, modifications and variations will be 
apparent to those skilled in the art. Accordingly, it is intended to 
embrace all such alternatives, modifications and variations that 
fall within the spirit and scope thereof as set forth in the 
appended claims. 
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